Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/ff0bfc-26fe-4412-a232-31999f3add36/1/epOKk1-Lr5zZM5BkFlkNeC5yh8c.mft
File: epOKk1-Lr5zZM5BkFlkNeC5yh8c.mft (raw, json)
Hash identifier: Gw+HFk9U7qgQcU7CyT34O7+i2ME7xM2zIn9sjzWD/oI=
Subject key identifier: AB:20:4E:C2:EB:5C:8E:09:7A:87:15:5A:53:EB:B1:78:9A:14:0F:28
Authority key identifier: 7A:93:8A:93:5F:8B:AF:9C:D9:33:90:64:16:59:0D:78:2E:72:87:C7
Certificate issuer: /CN=7a938a935f8baf9cd933906416590d782e7287c7
Certificate serial: 0193512C0BBE340637C5CFBD608B107271B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/epOKk1-Lr5zZM5BkFlkNeC5yh8c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/ff0bfc-26fe-4412-a232-31999f3add36/1/epOKk1-Lr5zZM5BkFlkNeC5yh8c.mft
Manifest number: 136D
Signing time: Fri 22 Nov 2024 00:01:01 +0000
Manifest this update: Fri 22 Nov 2024 00:01:01 +0000
Manifest next update: Sat 23 Nov 2024 00:01:01 +0000
Files and hashes: 1: QK-51fochtgCFG6e93f3VnAVjhs.roa (hash: Sm7B7cgXLIdCnECm5cGbNiz2FfRXn1K862HSluhv0C0=)
2: epOKk1-Lr5zZM5BkFlkNeC5yh8c.crl (hash: 68dHcpQw22CdcOw6akMGljD3SxBmDFJPhEUw1k4nFkk=)
3: esmCaqElg-Axi2RZmF9Mc6VJ37k.roa (hash: +RBlnc6SJ3MBzqIHVceUB7RA/z4d+hnL2lb2IKab7kA=)
4: fr9Mf0IApBMsenI6NHo4up-nFvU.roa (hash: i3HrismmcNL1Jf0FhPT8zfNES2Hc2oG2jqcakKfVpRI=)
5: pzRyDYsSZJv8LWDeYPaiz8cgCuM.roa (hash: xXCdHGJ9zGQUoCHq51+MESjAcT3CZX3VXzUWm0umwK4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/ff0bfc-26fe-4412-a232-31999f3add36/1/epOKk1-Lr5zZM5BkFlkNeC5yh8c.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/ff0bfc-26fe-4412-a232-31999f3add36/1/epOKk1-Lr5zZM5BkFlkNeC5yh8c.mft
rsync://rpki.ripe.net/repository/DEFAULT/epOKk1-Lr5zZM5BkFlkNeC5yh8c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 00:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:51:2c:0b:be:34:06:37:c5:cf:bd:60:8b:10:72:71:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7a938a935f8baf9cd933906416590d782e7287c7
Validity
Not Before: Nov 22 00:01:01 2024 GMT
Not After : Nov 23 00:01:01 2024 GMT
Subject: CN=ab204ec2eb5c8e097a87155a53ebb1789a140f28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:2c:cd:98:54:8e:fe:64:e1:c7:25:cb:a8:fb:
ad:e5:d9:fa:29:be:76:ab:4c:7f:8a:06:11:fd:10:
7f:f8:40:71:1d:5a:e2:fd:40:a4:49:bf:e2:39:70:
cd:64:8d:b5:4d:75:66:20:96:2e:e3:d9:f3:8e:cd:
b6:fc:49:52:be:1b:59:50:b3:59:8b:cc:29:08:ff:
d6:ad:58:e3:aa:89:8f:b9:9a:be:82:f5:d3:bb:1c:
4d:5e:a9:d9:31:7d:21:6b:6a:1e:de:7a:58:4c:f0:
ac:13:9f:89:ab:e5:e0:1d:1b:3e:48:44:b6:04:bd:
4f:31:bf:8f:5e:d8:1d:71:f5:73:8f:73:14:9a:69:
1d:bc:76:eb:5f:bf:ed:46:44:9c:0c:4a:95:f4:86:
8b:5c:33:0e:e5:d7:66:28:da:69:86:78:03:ff:98:
ae:b1:e3:28:23:4a:e0:84:11:48:97:f3:61:05:ae:
8d:29:20:06:09:32:2c:d8:c3:f1:62:14:a8:bb:59:
24:b4:88:43:d8:95:09:a5:65:dc:a3:5b:0a:4d:0d:
5a:38:c3:59:f1:e7:94:19:6d:8a:29:ce:c3:57:04:
5e:ea:b2:c1:87:b2:ee:c7:38:0b:51:1d:57:fd:46:
08:35:44:b6:00:0f:e5:c0:0e:c2:53:d9:d6:18:c0:
1d:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:20:4E:C2:EB:5C:8E:09:7A:87:15:5A:53:EB:B1:78:9A:14:0F:28
X509v3 Authority Key Identifier:
keyid:7A:93:8A:93:5F:8B:AF:9C:D9:33:90:64:16:59:0D:78:2E:72:87:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/epOKk1-Lr5zZM5BkFlkNeC5yh8c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/ff0bfc-26fe-4412-a232-31999f3add36/1/epOKk1-Lr5zZM5BkFlkNeC5yh8c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/ff0bfc-26fe-4412-a232-31999f3add36/1/epOKk1-Lr5zZM5BkFlkNeC5yh8c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:61:32:ae:64:55:d1:4d:dc:99:87:96:11:1a:96:fb:03:33:
a0:a2:46:54:ec:79:98:38:90:07:7c:56:42:60:50:65:a1:07:
e2:ed:75:78:c8:a0:11:d1:ef:e9:21:21:b3:4f:66:8a:e6:2c:
97:f0:9d:35:29:66:91:5d:4a:d0:4e:87:e4:d3:93:0f:cf:fe:
17:b5:1d:3a:16:eb:67:61:ba:1b:6d:de:08:83:f0:b0:c1:6a:
26:f6:c0:1a:25:64:d8:52:b1:95:a3:40:94:f7:1b:be:45:f7:
d4:bb:76:f1:67:27:d5:be:14:8c:d2:52:4b:56:59:f2:86:6b:
aa:dd:cc:ad:6c:41:b8:b7:14:9c:15:f9:a7:3c:f8:59:a1:d0:
5f:1b:ce:5e:e9:b2:6a:d7:4f:6a:a0:88:1c:63:3a:05:d7:59:
82:63:0c:40:5e:9f:2c:ff:3b:cd:fb:a2:00:cb:f9:ad:8b:03:
a3:ed:94:4b:02:08:07:8b:8a:91:da:c6:02:7e:57:94:d9:21:
30:0e:2f:2e:64:6c:c5:91:11:c7:79:80:1e:9a:6a:33:8b:f0:
a3:35:51:9a:88:20:fa:ec:95:50:f1:59:76:34:2a:9d:6f:c7:
ee:91:6c:91:91:f4:c7:ae:57:54:0b:7f:fe:c4:c4:1f:75:f6:
ab:c6:3d:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 09:56:19 2024 by rpki-client on console-fra.rpki-client.org